Failed security - you should know better